CVE-2013-3249
Severity Score
9.3
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Stack-based buffer overflow in the "Add from text file" feature in the DameWare Exporter tool (DWExporter.exe) in DameWare Remote Support 10.0.0.372, 9.0.1.247, and earlier allows user-assisted attackers to execute arbitrary code via unspecified vectors.
Desbordamiento de buffer basado en pila en la funcionalidad "Añadir desde archivo de texto" en la herramienta DameWare Exporter (DWExporter.exe) en DameWare Remote Support 10.0.0.372, 9.0.1.247 y anteriores permite a atacantes asistidos por usuario ejecutar código arbitrario a través de vectores no especificados.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2013-04-22 CVE Reserved
- 2014-03-20 CVE Published
- 2023-09-14 EPSS Updated
- 2024-08-06 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-787: Out-of-bounds Write
CAPEC
References (4)
| URL | Tag | Source |
|---|---|---|
| http://osvdb.org/95658 | Broken Link | |
| http://www.securityfocus.com/bid/61453 | Third Party Advisory | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/85973 | Vdb Entry |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://secunia.com/advisories/53096 | 2020-01-10 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Solarwinds Search vendor "Solarwinds" | Dameware Remote Support Search vendor "Solarwinds" for product "Dameware Remote Support" | <= 9.0.1.247 Search vendor "Solarwinds" for product "Dameware Remote Support" and version " <= 9.0.1.247" | - |
Affected
| ||||||
| Solarwinds Search vendor "Solarwinds" | Dameware Remote Support Search vendor "Solarwinds" for product "Dameware Remote Support" | >= 10.0 <= 10.0.0.372 Search vendor "Solarwinds" for product "Dameware Remote Support" and version " >= 10.0 <= 10.0.0.372" | - |
Affected
| ||||||